@threadplane/render@0.3.3
Angular render engine for agent-generated UI: maps JSON specs onto your own design-system components.
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe postinstall hook automatically discloses identifying installation and Git configuration data to a growth collector. Because the transfer is not gated by affirmative consent, this is malicious install-time data exfiltration.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review
Trigger
Installing the package runs its postinstall hook.
Impact
Identifying installation data leaves the installer's machine without affirmative opt-in.
Mechanism
The hook collects an installation ID, package and environment metadata, and configured Git identity fields, then sends an event to the collector endpoint.
Attack narrative
Installing the package automatically runs a postinstall collector. It sends a persistent installation identifier and environment details to the publisher's growth endpoint, and includes configured Git names and email addresses when available. The only consent control is an environment opt-out; the install path does not require affirmative consent.
AI rationale
The postinstall hook automatically discloses identifying installation and Git configuration data to a growth collector. Because the transfer is not gated by affirmative consent, this is malicious install-time data exfiltration.
Evidence
package.jsoninstall/postinstall.cjsinstall/collector.cjsinstall/identity.cjsinstall/git-context.cjs
Network endpoints1
threadplane.ai/api/growth/collect/v1/install
Decision evidence
public snapshotAI called this Malicious at 98.0% confidence as Malware with low false-positive risk.
Evidence for block
- The manifest runs a postinstall hook, which invokes the collector during installation.
- The collector sends an installation event by HTTPS POST to the package publisher's growth endpoint.
- The event includes a persistent installation ID and package, platform, runtime, and environment metadata.
- The collector reads configured Git display names and email addresses and adds them to the event identity.
- Collection is disabled only by environment opt-out variables; the install path has no affirmative-consent gate.
Evidence against
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
UrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.postinstall = node install/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg41"scripts": {
"postinstall": "node install/postinstall.cjs"
},
"module": "fesm2022/threadplane-render
High
Suspicious Lifecycle Evidence
The manifest runs a postinstall hook, which invokes the collector during installation.
package.jsonView on unpkg · L41•scripts.postinstall = node install/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkginstall/git-context.cjsView file
Findings
6 High3 Medium3 Low
HighInstall Time Lifecycle Scriptspackage.json
HighKnown Malware Source Similarityinstall/git-context.cjs
HighSuspicious Lifecycle Evidencepackage.json
HighSuspicious Lifecycle Evidenceinstall/postinstall.cjs
HighAi Review Evidenceinstall/collector.cjs
HighAi Review Evidenceinstall/collector.cjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowUrl Strings
Affected versions and remediation
This report applies to @threadplane/render@0.3.3.
See all versions of @threadplane/render for other recorded verdicts.
- Avoid installing @threadplane/render@0.3.3. Remove it from direct dependencies and check your lockfile for transitive copies.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
- If this version ran, investigate the affected machine and build environment. Rotate credentials it could access and rebuild from a trusted environment.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.